Security

Ask something
Discussion Locked

Installing SSL Certificate

0 helpful
8 replies

by mlacombe 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hopefully this is easy and it's something stupid that I'm missing.
I'm trying to install an SSL certificate on a single webpage. When I go into the properties on the webpage and look at the Directory Security, the Server Certificate button is greyed out. The only thing I can do is click on Edit.
I've installed Certificate Services and rebooted the server but still cannot get to the point where I pull the data from my server to put on the Verisign website to generate my SSL cert. Can somewhere tell me what I'm doing wrong?

8 replies

by lowlands

I am assuming here you are running IIS5 or 6.
I am not familiar with what exaclt the verisign website needs. I do know you don't need certificate serives on your server. You'd use that to create your own certificates.
Typically, to get a certificate you'll need all your company information, the name of your website and such. When verisign has given you your certificate, you will have to install it on your webserver. Depending on the format, you can just doubleclick the file you get and tell it to install (make sure to install in the computers certificate store, not a users). When you've done that, the Server Certificate button will no longer be greyed out.

by sgt_shultz

did you see this (i've snipped the good part)
http://support.microsoft.com/kb/306667/en-us

Server Certificate Button Unavailable in IIS
View products that this article applies to.
Article ID : 306667
Last Review : June 30, 2004
Revision : 1.0
This article was previously published under Q306667
On This Page
SYMPTOMS
CAUSE
RESOLUTION
MORE INFORMATION
Steps to Reproduce the Behavior
REFERENCES
SYMPTOMS
When you try to generate a certificate request by using the Internet Information Services (IIS) Certificate Wizard from the properties of a site, the Server Certificate button may be unavailable or you may receive an error message similar to the following:
The Instruction at "0X64e6a38e" referenced memory at 0X00000000. The memory could not be "read".

Note You may also see the IIS Manager close without error.
Back to the top

CAUSE
The Xenroll.dll file is not properly registered.
Back to the top

RESOLUTION
Xenroll.dll is located in the \Winnt\System32 directory. Follow these steps to reregister Xenroll.dll: 1. Open Windows Explorer, expand the Winnt directory, and then click the System32 directory.
2. Click Start, click Run, and then type Regsvr32 in the text box.
3. In Windows Explorer, locate Xenroll.dll in the \Winnt\System32 directory, and then drag Xenroll.dll into the text box that is described in step 2.
4. Click OK. A message box states that the Xenroll.dll registration is successful.

by navyjax2

Long story short, reply said to do:
regsvr32 C:\WINDOWS\system32\xenroll.dll
at the Run line. This may or may not have worked for me, since I didn't check it at the "Default Web Site" level before running the command.

What I needed to do, though, was to go to the "Default Web Site" properties and find "Server Certificate" in the Directory Security tab there, instead of under the virtual directory I was trying to secure. Apparently IIS doesn't let you go down that granularly to set SSL on only one site versus another.

by mlacombe

Well I knew it was something stupid. I was trying to get to the area I needed through the folder, not through the actual website itself. Thanks for the help anyway.

This discussion is closed to new replies.